Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: mQ6UpEvvQhP/TpU4i7GpEzJJPLpfOHtaxCThgI44PXs=
Subject key identifier: 00:7E:DE:5F:90:E4:15:43:BC:5D:25:96:7F:A1:50:19:C7:E7:FE:DC
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 01964DB4E32E50A101C1721DA86A49907076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 04A5
Signing time: Sat 19 Apr 2025 11:00:22 +0000
Manifest this update: Sat 19 Apr 2025 11:00:22 +0000
Manifest next update: Sun 20 Apr 2025 11:00:22 +0000
Files and hashes: 1: 9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa (hash: NvC05zdhztqBgGL0x7IrDtfQb3ZiSTjs+SHJkAWRFb8=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: 9ftB6X4iGpJl84dqXUROMEgUyIwlFbeNF/+um4r+anU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:e3:2e:50:a1:01:c1:72:1d:a8:6a:49:90:70:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: Apr 19 11:00:22 2025 GMT
Not After : Apr 20 11:00:22 2025 GMT
Subject: CN=007ede5f90e41543bc5d25967fa15019c7e7fedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:11:ab:aa:6b:0d:80:81:24:e9:7b:b4:f0:
53:04:55:ee:ad:28:03:60:4e:5f:96:cb:03:9c:99:
b6:58:4f:75:06:cb:85:c5:f9:23:0c:dc:97:fc:77:
90:1c:9c:d9:dd:07:4b:b4:57:f1:17:af:b1:14:0b:
0b:ce:a6:12:a5:6f:a4:75:ec:37:03:af:39:dd:8d:
6f:2e:3f:14:a8:40:76:ee:94:28:2f:e6:e0:d9:98:
33:5a:d6:22:ee:7f:04:7a:a6:37:d6:ff:35:ca:94:
be:67:b4:68:58:dd:0c:f0:2b:27:ff:46:08:d9:40:
0c:c9:1f:2a:25:fc:8f:3c:2d:0e:51:d9:98:b2:41:
78:ea:19:fc:2a:30:b4:89:d2:27:28:9b:47:86:72:
80:90:2e:df:61:93:34:d3:dc:a8:4f:22:d3:45:eb:
45:ba:df:b6:43:6b:e4:d2:14:29:44:29:25:25:1b:
f6:6c:ac:d4:6b:45:2e:73:9c:b3:f0:7a:26:a4:16:
da:84:5b:77:76:24:7a:c2:6e:f1:b6:39:86:05:da:
c0:ca:5b:ca:52:00:05:e2:ee:a7:d8:cc:b8:32:9a:
41:f9:cf:59:a9:e3:d2:5e:d9:f8:5a:47:ad:f3:6c:
22:ff:7e:0d:e6:2f:50:64:aa:cb:5a:66:d3:a5:c7:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7E:DE:5F:90:E4:15:43:BC:5D:25:96:7F:A1:50:19:C7:E7:FE:DC
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:db:49:3e:92:e2:cb:bf:29:94:2b:14:2d:3c:f2:d3:5f:b2:
56:63:83:96:5b:98:f8:d1:5e:e5:45:78:54:ee:2e:ac:8e:10:
10:41:3b:81:4e:ea:c8:20:00:6d:cf:38:98:ce:35:4d:8d:42:
5e:91:45:e5:ae:5c:24:1b:8e:ad:bd:46:d2:b7:08:01:b0:9d:
e2:07:ea:c7:f1:41:05:67:23:2f:37:d6:da:eb:dc:77:1c:aa:
0d:63:70:f7:04:44:0f:d5:89:0a:9c:f4:68:0c:eb:25:6d:b7:
70:96:48:d4:5b:e9:f8:1e:04:f1:03:b1:0d:37:3b:0c:d7:ee:
14:99:ed:83:ad:96:63:d5:4e:48:6e:6e:f9:59:c1:90:69:7a:
fd:3d:e7:82:22:64:98:7d:90:07:5b:28:ea:af:68:a6:4c:09:
a1:ee:67:70:63:08:c6:93:cc:12:eb:e5:1b:c2:6b:a5:9f:eb:
74:ca:45:f0:1f:3f:b6:2d:89:a4:be:c8:3b:88:22:9e:53:d2:
ca:2a:12:e4:5a:03:c7:ba:c2:4b:77:59:3c:7b:7d:01:73:68:
46:19:26:99:ea:68:49:6c:6f:e4:37:fe:93:bf:f7:95:33:f6:
b7:8f:1c:38:8d:dc:cc:13:84:bb:30:01:1c:d9:5e:f6:07:80:
76:c2:03:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNtOMuUKEBwXIdqGpJkHB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjA4ODUxMjAyMzI4ZGNlNWZjMDFiZjlkZDI5MjUyMDUz
MGQ5ZmUwHhcNMjUwNDE5MTEwMDIyWhcNMjUwNDIwMTEwMDIyWjAzMTEwLwYDVQQD
EygwMDdlZGU1ZjkwZTQxNTQzYmM1ZDI1OTY3ZmExNTAxOWM3ZTdmZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GkRq6prDYCBJOl7tPBTBFXurSgD
YE5flssDnJm2WE91BsuFxfkjDNyX/HeQHJzZ3QdLtFfxF6+xFAsLzqYSpW+kdew3
A6853Y1vLj8UqEB27pQoL+bg2ZgzWtYi7n8EeqY31v81ypS+Z7RoWN0M8Csn/0YI
2UAMyR8qJfyPPC0OUdmYskF46hn8KjC0idInKJtHhnKAkC7fYZM009yoTyLTRetF
ut+2Q2vk0hQpRCklJRv2bKzUa0Uuc5yz8HompBbahFt3diR6wm7xtjmGBdrAylvK
UgAF4u6n2My4MppB+c9ZqePSXtn4Wket82wi/34N5i9QZKrLWmbTpccvRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAB+3l+Q5BVDvF0lln+hUBnH5/7cMB8GA1UdIwQY
MBaAFINgiFEgIyjc5fwBv53SklIFMNn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMt
Yzc1NmFlMDFmYThhLzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMtYzc1NmFlMDFmYThh
LzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9tJPpLi
y78plCsULTzy01+yVmODlluY+NFe5UV4VO4urI4QEEE7gU7qyCAAbc84mM41TY1C
XpFF5a5cJBuOrb1G0rcIAbCd4gfqx/FBBWcjLzfW2uvcdxyqDWNw9wRED9WJCpz0
aAzrJW23cJZI1Fvp+B4E8QOxDTc7DNfuFJntg62WY9VOSG5u+VnBkGl6/T3ngiJk
mH2QB1so6q9opkwJoe5ncGMIxpPMEuvlG8JrpZ/rdMpF8B8/ti2JpL7IO4ginlPS
yioS5FoDx7rCS3dZPHt9AXNoRhkmmepoSWxv5Df+k7/3lTP2t48cOI3czBOEuzAB
HNle9geAdsIDLg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:23:22 2025 by rpki-client